@prosopo/better-auth-procaptcha-plugin 0.0.0 → 0.1.0

package/dist/tsc/tests/client.unit.test.js

@@ -0,0 +1,56 @@
+import { getTestInstance } from "better-auth/test";
+import { describe, expect, it, vi } from "vitest";
+import { procaptchaClient, procaptchaHeaders, } from "../client.js";
+import { procaptcha } from "../index.js";
+import { mockSiteVerify } from "./siteVerifyMock.js";
+const setup = async (clientOptions) => {
+    const siteVerify = mockSiteVerify();
+    const { client } = await getTestInstance({
+        plugins: [procaptcha({ secretKey: "secret", fetch: siteVerify.fetch })],
+    }, { clientOptions: { plugins: [procaptchaClient(clientOptions)] } });
+    return { client, siteVerify };
+};
+describe("procaptcha client plugin", () => {
+    it("builds the header the server plugin reads", () => {
+        expect(procaptchaHeaders("tok")).toEqual({ "x-captcha-response": "tok" });
+        expect(procaptchaHeaders("tok", "x-custom")).toEqual({ "x-custom": "tok" });
+    });
+    it("attaches the token from getToken to protected requests", async () => {
+        const getToken = vi.fn(async () => "auto-token");
+        const { client, siteVerify } = await setup({ getToken });
+        const result = await client.signIn.email({
+            email: "test@test.com",
+            password: "test123456",
+        });
+        expect(result.error).toBeNull();
+        expect(getToken).toHaveBeenCalledTimes(1);
+        expect(siteVerify.calls[0]?.body.token).toBe("auto-token");
+    });
+    it("does not ask for a token on unprotected requests", async () => {
+        const getToken = vi.fn(() => "auto-token");
+        const { client } = await setup({ getToken });
+        await client.getSession();
+        expect(getToken).not.toHaveBeenCalled();
+    });
+    it("keeps a token passed explicitly in fetchOptions", async () => {
+        const getToken = vi.fn(() => "auto-token");
+        const { client, siteVerify } = await setup({ getToken });
+        await client.signIn.email({
+            email: "test@test.com",
+            password: "test123456",
+            fetchOptions: { headers: procaptchaHeaders("explicit-token") },
+        });
+        expect(getToken).not.toHaveBeenCalled();
+        expect(siteVerify.calls[0]?.body.token).toBe("explicit-token");
+    });
+    it("sends no header when getToken has no token yet", async () => {
+        const { client, siteVerify } = await setup({ getToken: () => undefined });
+        const result = await client.signIn.email({
+            email: "test@test.com",
+            password: "test123456",
+        });
+        expect(result.error?.status).toBe(400);
+        expect(siteVerify.calls).toHaveLength(0);
+    });
+});
+//# sourceMappingURL=client.unit.test.js.map

package/dist/tsc/tests/client.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.unit.test.js","sourceRoot":"","sources":["../../../src/tests/client.unit.test.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAEN,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,KAAK,GAAG,KAAK,EAAE,aAAsC,EAAE,EAAE;IAC9D,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CACvC;QACC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;KACvE,EACD,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CACjE,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAC/B,CAAC,CAAC;AAEF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAwB,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;QACxE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YACxC,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,YAAY;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAe,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE7C,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QAE1B,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAe,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEzD,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YACzB,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,YAAY;YACtB,YAAY,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,gBAAgB,CAAC,EAAE;SAC9D,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YACxC,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,YAAY;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tsc/tests/path.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=path.unit.test.d.ts.map

package/dist/tsc/tests/path.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.unit.test.d.ts","sourceRoot":"","sources":["../../../src/tests/path.unit.test.ts"],"names":[],"mappings":""}

package/dist/tsc/tests/path.unit.test.js

@@ -0,0 +1,53 @@
+import { describe, expect, it } from "vitest";
+import { createPathMatcher, normalizeAuthPath } from "../path.js";
+describe("normalizeAuthPath", () => {
+    it.each([
+        ["/api/auth/sign-in/email", "/api/auth", "/sign-in/email"],
+        ["/api/auth//sign-in//email/", "/api/auth", "/sign-in/email"],
+        ["/api/auth", "/api/auth", "/"],
+        ["/other/sign-in/email", "/api/auth", "/other/sign-in/email"],
+        ["/sign-in/email", "", "/sign-in/email"],
+    ])("%s under %s is %s", (pathname, basePath, expected) => {
+        expect(normalizeAuthPath(pathname, basePath)).toBe(expected);
+    });
+});
+describe("createPathMatcher", () => {
+    it("matches exact paths only when there is no wildcard", () => {
+        const matches = createPathMatcher(["/sign-in/email"]);
+        expect(matches("/sign-in/email")).toBe(true);
+        expect(matches("/sign-in/email/extra")).toBe(false);
+        expect(matches("/sign-in/emailx")).toBe(false);
+    });
+    it("matches one segment with * and any depth with **", () => {
+        const single = createPathMatcher(["/sign-in/*"]);
+        expect(single("/sign-in/email")).toBe(true);
+        expect(single("/sign-in/social/google")).toBe(false);
+        const deep = createPathMatcher(["/sign-in/**"]);
+        expect(deep("/sign-in")).toBe(true);
+        expect(deep("/sign-in/social/google")).toBe(true);
+        expect(deep("/sign-up/email")).toBe(false);
+    });
+    it("matches partial-segment wildcards and ** in the middle", () => {
+        const partial = createPathMatcher(["/sign-*/e*l"]);
+        expect(partial("/sign-in/email")).toBe(true);
+        expect(partial("/sign-up/el")).toBe(true);
+        expect(partial("/sign-in/e")).toBe(false);
+        expect(partial("/signin/email")).toBe(false);
+        const many = createPathMatcher(["/a*b*c"]);
+        expect(many("/abc")).toBe(true);
+        expect(many("/axxbyyc")).toBe(true);
+        expect(many("/abbc")).toBe(true);
+        expect(many("/acb")).toBe(false);
+        expect(many("/axc")).toBe(false);
+        const middle = createPathMatcher(["/**/email"]);
+        expect(middle("/email")).toBe(true);
+        expect(middle("/sign-in/social/email")).toBe(true);
+        expect(middle("/sign-in/email/x")).toBe(false);
+    });
+    it("treats regex characters in endpoints literally", () => {
+        const matches = createPathMatcher(["/a.b/*"]);
+        expect(matches("/a.b/c")).toBe(true);
+        expect(matches("/axb/c")).toBe(false);
+    });
+});
+//# sourceMappingURL=path.unit.test.js.map

package/dist/tsc/tests/path.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.unit.test.js","sourceRoot":"","sources":["../../../src/tests/path.unit.test.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAElE,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,IAAI,CAAC;QACP,CAAC,yBAAyB,EAAE,WAAW,EAAE,gBAAgB,CAAC;QAC1D,CAAC,4BAA4B,EAAE,WAAW,EAAE,gBAAgB,CAAC;QAC7D,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC;QAC/B,CAAC,sBAAsB,EAAE,WAAW,EAAE,sBAAsB,CAAC;QAC7D,CAAC,gBAAgB,EAAE,EAAE,EAAE,gBAAgB,CAAC;KACxC,CAAC,CACD,mBAAmB,EACnB,CAAC,QAAgB,EAAE,QAAgB,EAAE,QAAgB,EAAE,EAAE;QACxD,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC,CACD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,iBAAiB,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAErD,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QACjE,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE7C,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,iBAAiB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACzD,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tsc/tests/procaptcha.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=procaptcha.unit.test.d.ts.map

package/dist/tsc/tests/procaptcha.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"procaptcha.unit.test.d.ts","sourceRoot":"","sources":["../../../src/tests/procaptcha.unit.test.ts"],"names":[],"mappings":""}

package/dist/tsc/tests/procaptcha.unit.test.js

@@ -0,0 +1,158 @@
+import { getTestInstance } from "better-auth/test";
+import { describe, expect, it } from "vitest";
+import { PROCAPTCHA_SITEVERIFY_URL, procaptcha, } from "../index.js";
+import { errorEnvelope, mockSiteVerify, rejectedResponse, verifiedResponse, } from "./siteVerifyMock.js";
+const TOKEN = "procaptcha-token";
+const SECRET = "test-secret-key";
+const CLIENT_IP = "203.0.113.7";
+const setup = async (options = {}, respond) => {
+    const siteVerify = mockSiteVerify(respond);
+    const { auth } = await getTestInstance({
+        plugins: [
+            procaptcha({ secretKey: SECRET, fetch: siteVerify.fetch, ...options }),
+        ],
+    });
+    const post = (path, body, headers) => auth.handler(new Request(`http://localhost:3000/api/auth${path}`, {
+        method: "POST",
+        headers: { "content-type": "application/json", ...headers },
+        body: JSON.stringify(body),
+    }));
+    return {
+        siteVerify,
+        signIn: (headers = {}) => post("/sign-in/email", { email: "test@test.com", password: "test123456" }, headers),
+        signUp: (email, headers = {}) => post("/sign-up/email", { email, password: "a-long-password", name: "New User" }, headers),
+    };
+};
+const withToken = (extra = {}) => ({
+    "x-captcha-response": TOKEN,
+    "x-forwarded-for": CLIENT_IP,
+    ...extra,
+});
+const readError = async (response) => {
+    const body = await response.json();
+    if (typeof body !== "object" ||
+        body === null ||
+        !("code" in body) ||
+        typeof body.code !== "string" ||
+        !("message" in body) ||
+        typeof body.message !== "string") {
+        throw new Error(`unexpected error body: ${JSON.stringify(body)}`);
+    }
+    return { code: body.code, message: body.message };
+};
+describe("procaptcha server plugin", () => {
+    it("lets a request with a verified token through and sends secret, token and IP", async () => {
+        const { signIn, siteVerify } = await setup();
+        const response = await signIn(withToken());
+        expect(response.status).toBe(200);
+        expect(siteVerify.calls).toHaveLength(1);
+        const [call] = siteVerify.calls;
+        expect(call?.url).toBe(PROCAPTCHA_SITEVERIFY_URL);
+        expect(call?.headers.get("content-type")).toBe("application/json");
+        expect(call?.body).toEqual({ secret: SECRET, token: TOKEN, ip: CLIENT_IP });
+    });
+    it("returns 400 without calling siteverify when the token header is missing", async () => {
+        const { signIn, siteVerify } = await setup();
+        const response = await signIn({ "x-forwarded-for": CLIENT_IP });
+        expect(response.status).toBe(400);
+        expect(response.headers.get("content-type")).toContain("application/json");
+        expect((await readError(response)).code).toBe("PROCAPTCHA_MISSING_RESPONSE");
+        expect(siteVerify.calls).toHaveLength(0);
+    });
+    it("returns 403 when siteverify answers verified: false", async () => {
+        const { signIn } = await setup({}, () => rejectedResponse("API.USER_ALREADY_VERIFIED"));
+        const response = await signIn(withToken());
+        expect(response.status).toBe(403);
+        expect((await readError(response)).code).toBe("PROCAPTCHA_VERIFICATION_FAILED");
+    });
+    it("leaves endpoints outside the list alone", async () => {
+        const { signIn, siteVerify } = await setup({
+            endpoints: ["/sign-up/email"],
+        });
+        const response = await signIn();
+        expect(response.status).toBe(200);
+        expect(siteVerify.calls).toHaveLength(0);
+    });
+    it("matches wildcard endpoints", async () => {
+        const { signIn, siteVerify } = await setup({ endpoints: ["/sign-in/*"] });
+        const response = await signIn();
+        expect(response.status).toBe(400);
+        expect(siteVerify.calls).toHaveLength(0);
+    });
+    it("rejects a verified token whose score is above maxScore", async () => {
+        const { signIn } = await setup({ maxScore: 0.5 }, () => verifiedResponse({ score: 0.9 }));
+        const response = await signIn(withToken());
+        expect(response.status).toBe(403);
+    });
+    it("accepts a verified token at or below maxScore, or with no score", async () => {
+        let score = 0.5;
+        const { signIn } = await setup({ maxScore: 0.5 }, () => verifiedResponse(score === undefined ? {} : { score }));
+        expect((await signIn(withToken())).status).toBe(200);
+        score = undefined;
+        expect((await signIn(withToken())).status).toBe(200);
+    });
+    it("omits the IP when sendIP is false", async () => {
+        const { signIn, siteVerify } = await setup({ sendIP: false });
+        await signIn(withToken());
+        expect(siteVerify.calls[0]?.body).toEqual({ secret: SECRET, token: TOKEN });
+    });
+    it("sends the full IPv6 address rather than Better Auth's rate-limit subnet", async () => {
+        const { signIn, siteVerify } = await setup();
+        await signIn(withToken({ "x-forwarded-for": "2001:db8::1" }));
+        expect(siteVerify.calls[0]?.body.ip).toBe("2001:0db8:0000:0000:0000:0000:0000:0001");
+    });
+    it("sends only the email domain when sendEmailDomain is on", async () => {
+        const { signUp, siteVerify } = await setup({ sendEmailDomain: true });
+        const response = await signUp("New.User@Example.COM", withToken());
+        expect(response.status).toBe(200);
+        expect(siteVerify.calls[0]?.body.email).toBe("example.com");
+    });
+    it("does not send the email by default", async () => {
+        const { signUp, siteVerify } = await setup();
+        await signUp("someone@example.com", withToken());
+        expect(siteVerify.calls[0]?.body.email).toBeUndefined();
+    });
+    it("uses a custom header name and siteverify URL", async () => {
+        const siteVerifyURL = "https://eu-api.prosopo.io/siteverify";
+        const { signIn, siteVerify } = await setup({
+            headerName: "x-procaptcha-response",
+            siteVerifyURL,
+        });
+        const response = await signIn({ "x-procaptcha-response": TOKEN });
+        expect(response.status).toBe(200);
+        expect(siteVerify.calls[0]?.url).toBe(siteVerifyURL);
+    });
+    it("returns 500 when siteverify rejects the request itself", async () => {
+        const { signIn } = await setup({}, () => errorEnvelope(400, "API.INVALID_SITE_KEY", "Invalid site key"));
+        const response = await signIn(withToken());
+        expect(response.status).toBe(500);
+        expect((await readError(response)).code).toBe("PROCAPTCHA_UNKNOWN_ERROR");
+    });
+    it.each([
+        ["a 5xx", () => errorEnvelope(500, "API.BAD_REQUEST", "x")],
+        ["a 429", () => errorEnvelope(429, "API.BAD_REQUEST", "x")],
+        [
+            "a non-JSON 502",
+            () => new Response("bad gateway", { status: 502 }),
+        ],
+        ["an unexpected body", () => Response.json({ ok: true })],
+        [
+            "a network failure",
+            () => {
+                throw new TypeError("fetch failed");
+            },
+        ],
+    ])("returns 503 on %s", async (_label, respond) => {
+        const { signIn } = await setup({}, respond);
+        const response = await signIn(withToken());
+        expect(response.status).toBe(503);
+        expect((await readError(response)).code).toBe("PROCAPTCHA_SERVICE_UNAVAILABLE");
+    });
+    it("returns 500 without calling siteverify when no secret key is configured", async () => {
+        const { signIn, siteVerify } = await setup({ secretKey: "" });
+        const response = await signIn(withToken());
+        expect(response.status).toBe(500);
+        expect(siteVerify.calls).toHaveLength(0);
+    });
+});
+//# sourceMappingURL=procaptcha.unit.test.js.map

package/dist/tsc/tests/procaptcha.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"procaptcha.unit.test.js","sourceRoot":"","sources":["../../../src/tests/procaptcha.unit.test.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACN,yBAAyB,EAEzB,UAAU,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EAGN,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,gBAAgB,GAChB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,KAAK,GAAG,kBAAkB,CAAC;AACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC;AACjC,MAAM,SAAS,GAAG,aAAa,CAAC;AAWhC,MAAM,KAAK,GAAG,KAAK,EAClB,UAAsC,EAAE,EACxC,OAA6B,EACV,EAAE;IACrB,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC;QACtC,OAAO,EAAE;YACR,UAAU,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC;SACtE;KACD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CACZ,IAAY,EACZ,IAA4B,EAC5B,OAA+B,EACX,EAAE,CACtB,IAAI,CAAC,OAAO,CACX,IAAI,OAAO,CAAC,iCAAiC,IAAI,EAAE,EAAE;QACpD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE;QAC3D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC1B,CAAC,CACF,CAAC;IACH,OAAO;QACN,UAAU;QACV,MAAM,EAAE,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,CACxB,IAAI,CACH,gBAAgB,EAChB,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,EAClD,OAAO,CACP;QACF,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CAC/B,IAAI,CACH,gBAAgB,EAChB,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,EACxD,OAAO,CACP;KACF,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CACjB,QAAgC,EAAE,EACT,EAAE,CAAC,CAAC;IAC7B,oBAAoB,EAAE,KAAK;IAC3B,iBAAiB,EAAE,SAAS;IAC5B,GAAG,KAAK;CACR,CAAC,CAAC;AAOH,MAAM,SAAS,GAAG,KAAK,EAAE,QAAkB,EAAsB,EAAE;IAClE,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC5C,IACC,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;QACjB,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAC7B,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC;QACpB,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAC/B,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACnD,CAAC,CAAC;AAEF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;QAE7C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAE3C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;QAChC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;QAE7C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC;QAEhE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC3E,MAAM,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAC5C,6BAA6B,CAC7B,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CACvC,gBAAgB,CAAC,2BAA2B,CAAC,CAC7C,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAE3C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAC5C,gCAAgC,CAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC;YAC1C,SAAS,EAAE,CAAC,gBAAgB,CAAC;SAC7B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC;QAEhC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAE1E,MAAM,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC;QAEhC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CACtD,gBAAgB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAChC,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAE3C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAChF,IAAI,KAAK,GAAuB,GAAG,CAAC;QACpC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CACtD,gBAAgB,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CACtD,CAAC;QAEF,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,KAAK,GAAG,SAAS,CAAC;QAClB,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAE9D,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAE1B,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;QAE7C,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QAE9D,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CACxC,yCAAyC,CACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,sBAAsB,EAAE,SAAS,EAAE,CAAC,CAAC;QAEnE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;QAE7C,MAAM,MAAM,CAAC,qBAAqB,EAAE,SAAS,EAAE,CAAC,CAAC;QAEjD,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,aAAa,GAAG,sCAAsC,CAAC;QAC7D,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC;YAC1C,UAAU,EAAE,uBAAuB;YACnC,aAAa;SACb,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC,CAAC;QAElE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CACvC,aAAa,CAAC,GAAG,EAAE,sBAAsB,EAAE,kBAAkB,CAAC,CAC9D,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAE3C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACP,CAAC,OAAO,EAAE,GAAa,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC,OAAO,EAAE,GAAa,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;QACrE;YACC,gBAAgB;YAChB,GAAa,EAAE,CAAC,IAAI,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;SAC5D;QACD,CAAC,oBAAoB,EAAE,GAAa,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE;YACC,mBAAmB;YACnB,GAAa,EAAE;gBACd,MAAM,IAAI,SAAS,CAAC,cAAc,CAAC,CAAC;YACrC,CAAC;SACD;KACD,CAAC,CAAC,mBAAmB,EAAE,KAAK,EAAE,MAAc,EAAE,OAAuB,EAAE,EAAE;QACzE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAE3C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAC5C,gCAAgC,CAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAE9D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAE3C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tsc/tests/siteVerifyMock.d.ts

@@ -0,0 +1,17 @@
+import { type Mock } from "vitest";
+import type { SiteVerifyRequestBody, SiteVerifyResponse } from "../siteverify.js";
+export interface SiteVerifyCall {
+    url: string;
+    headers: Headers;
+    body: SiteVerifyRequestBody;
+}
+export type SiteVerifyResponder = (body: SiteVerifyRequestBody) => Response | Promise<Response>;
+export interface SiteVerifyMock {
+    fetch: Mock<typeof fetch>;
+    calls: SiteVerifyCall[];
+}
+export declare const verifiedResponse: (overrides?: Partial<SiteVerifyResponse>) => Response;
+export declare const rejectedResponse: (reason?: string) => Response;
+export declare const errorEnvelope: (status: number, key: string, message: string) => Response;
+export declare const mockSiteVerify: (respond?: SiteVerifyResponder) => SiteVerifyMock;
+//# sourceMappingURL=siteVerifyMock.d.ts.map

package/dist/tsc/tests/siteVerifyMock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"siteVerifyMock.d.ts","sourceRoot":"","sources":["../../../src/tests/siteVerifyMock.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,KAAK,IAAI,EAAM,MAAM,QAAQ,CAAC;AACvC,OAAO,KAAK,EAEX,qBAAqB,EACrB,kBAAkB,EAClB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,cAAc;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,qBAAqB,CAAC;CAC5B;AAED,MAAM,MAAM,mBAAmB,GAAG,CACjC,IAAI,EAAE,qBAAqB,KACvB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAElC,MAAM,WAAW,cAAc;IAC9B,KAAK,EAAE,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC;IAC1B,KAAK,EAAE,cAAc,EAAE,CAAC;CACxB;AAUD,eAAO,MAAM,gBAAgB,eACjB,OAAO,CAAC,kBAAkB,CAAC,KACpC,QAOF,CAAC;AAEF,eAAO,MAAM,gBAAgB,YAAa,MAAM,KAAG,QAOlD,CAAC;AAEF,eAAO,MAAM,aAAa,WACjB,MAAM,OACT,MAAM,WACF,MAAM,KACb,QAKF,CAAC;AAEF,eAAO,MAAM,cAAc,aACjB,mBAAmB,KAC1B,cAeF,CAAC"}

package/dist/tsc/tests/siteVerifyMock.js

@@ -0,0 +1,43 @@
+import { vi } from "vitest";
+const isRequestBody = (value) => typeof value === "object" &&
+    value !== null &&
+    "secret" in value &&
+    typeof value.secret === "string" &&
+    "token" in value &&
+    typeof value.token === "string";
+export const verifiedResponse = (overrides = {}) => {
+    const body = {
+        status: "ok",
+        verified: true,
+        ...overrides,
+    };
+    return Response.json(body);
+};
+export const rejectedResponse = (reason) => {
+    const body = {
+        status: "ok",
+        verified: false,
+        ...(reason ? { reason } : {}),
+    };
+    return Response.json(body);
+};
+export const errorEnvelope = (status, key, message) => {
+    const body = {
+        error: { code: status, key, message },
+    };
+    return Response.json(body, { status });
+};
+export const mockSiteVerify = (respond = () => verifiedResponse()) => {
+    const calls = [];
+    const fetchMock = vi.fn(async (input, init) => {
+        const parsed = JSON.parse(String(init?.body));
+        if (!isRequestBody(parsed)) {
+            throw new Error("siteverify was called without secret and token");
+        }
+        const url = input instanceof Request ? input.url : new URL(input).toString();
+        calls.push({ url, headers: new Headers(init?.headers), body: parsed });
+        return respond(parsed);
+    });
+    return { fetch: fetchMock, calls };
+};
+//# sourceMappingURL=siteVerifyMock.js.map

package/dist/tsc/tests/siteVerifyMock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"siteVerifyMock.js","sourceRoot":"","sources":["../../../src/tests/siteVerifyMock.ts"],"names":[],"mappings":"AAaA,OAAO,EAAa,EAAE,EAAE,MAAM,QAAQ,CAAC;AAsBvC,MAAM,aAAa,GAAG,CAAC,KAAc,EAAkC,EAAE,CACxE,OAAO,KAAK,KAAK,QAAQ;IACzB,KAAK,KAAK,IAAI;IACd,QAAQ,IAAI,KAAK;IACjB,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;IAChC,OAAO,IAAI,KAAK;IAChB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;AAEjC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC/B,YAAyC,EAAE,EAChC,EAAE;IACb,MAAM,IAAI,GAAuB;QAChC,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,IAAI;QACd,GAAG,SAAS;KACZ,CAAC;IACF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAe,EAAY,EAAE;IAC7D,MAAM,IAAI,GAAuB;QAChC,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,KAAK;QACf,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7B,CAAC;IACF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC5B,MAAc,EACd,GAAW,EACX,OAAe,EACJ,EAAE;IACb,MAAM,IAAI,GAA4B;QACrC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE;KACrC,CAAC;IACF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAC7B,UAA+B,GAAG,EAAE,CAAC,gBAAgB,EAAE,EACtC,EAAE;IACnB,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CACtB,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAqB,EAAE;QACzE,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,GAAG,GACR,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CACD,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC,CAAC"}

package/dist/tsc/tests/siteverify.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=siteverify.unit.test.d.ts.map

package/dist/tsc/tests/siteverify.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"siteverify.unit.test.d.ts","sourceRoot":"","sources":["../../../src/tests/siteverify.unit.test.ts"],"names":[],"mappings":""}

package/dist/tsc/tests/siteverify.unit.test.js

@@ -0,0 +1,50 @@
+import { describe, expect, it, vi } from "vitest";
+import { verifyProcaptchaToken } from "../siteverify.js";
+import { errorEnvelope, mockSiteVerify, rejectedResponse, verifiedResponse, } from "./siteVerifyMock.js";
+describe("verifyProcaptchaToken", () => {
+    it("reports a verified token with its score", async () => {
+        const { fetch } = mockSiteVerify(() => verifiedResponse({ score: 0.2 }));
+        await expect(verifyProcaptchaToken({ secretKey: "s", token: "t", fetch })).resolves.toEqual({ outcome: "verified", score: 0.2 });
+    });
+    it("reports a rejected token with its reason", async () => {
+        const { fetch } = mockSiteVerify(() => rejectedResponse("API.USER_ALREADY_VERIFIED"));
+        await expect(verifyProcaptchaToken({ secretKey: "s", token: "t", fetch })).resolves.toEqual({
+            outcome: "rejected",
+            reason: "API.USER_ALREADY_VERIFIED",
+        });
+    });
+    it("passes through the error key of a 4xx envelope as a permanent error", async () => {
+        const { fetch } = mockSiteVerify(() => errorEnvelope(400, "GENERAL.MISSING_SECRET_KEY", "Missing secret key"));
+        await expect(verifyProcaptchaToken({ secretKey: "s", token: "t", fetch })).resolves.toEqual({
+            outcome: "error",
+            transient: false,
+            status: 400,
+            key: "GENERAL.MISSING_SECRET_KEY",
+            message: "Missing secret key",
+        });
+    });
+    it("does not send empty optional fields", async () => {
+        const { fetch, calls } = mockSiteVerify();
+        await verifyProcaptchaToken({
+            secretKey: "s",
+            token: "t",
+            ip: "",
+            email: "",
+            fetch,
+        });
+        expect(calls[0]?.body).toEqual({ secret: "s", token: "t" });
+    });
+    it("aborts a slow siteverify call after timeoutMs", async () => {
+        const slowFetch = vi.fn((_input, init) => new Promise((_resolve, reject) => {
+            init?.signal?.addEventListener("abort", () => reject(init.signal?.reason));
+        }));
+        const result = await verifyProcaptchaToken({
+            secretKey: "s",
+            token: "t",
+            timeoutMs: 20,
+            fetch: slowFetch,
+        });
+        expect(result).toMatchObject({ outcome: "error", transient: true });
+    });
+});
+//# sourceMappingURL=siteverify.unit.test.js.map

package/dist/tsc/tests/siteverify.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"siteverify.unit.test.js","sourceRoot":"","sources":["../../../src/tests/siteverify.unit.test.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EACN,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,gBAAgB,GAChB,MAAM,qBAAqB,CAAC;AAE7B,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAEzE,MAAM,MAAM,CACX,qBAAqB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAC5D,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,CACrC,gBAAgB,CAAC,2BAA2B,CAAC,CAC7C,CAAC;QAEF,MAAM,MAAM,CACX,qBAAqB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAC5D,CAAC,QAAQ,CAAC,OAAO,CAAC;YAClB,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,2BAA2B;SACnC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,CACrC,aAAa,CAAC,GAAG,EAAE,4BAA4B,EAAE,oBAAoB,CAAC,CACtE,CAAC;QAEF,MAAM,MAAM,CACX,qBAAqB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAC5D,CAAC,QAAQ,CAAC,OAAO,CAAC;YAClB,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,GAAG;YACX,GAAG,EAAE,4BAA4B;YACjC,OAAO,EAAE,oBAAoB;SAC7B,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,CAAC;QAE1C,MAAM,qBAAqB,CAAC;YAC3B,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,GAAG;YACV,EAAE,EAAE,EAAE;YACN,KAAK,EAAE,EAAE;YACT,KAAK;SACL,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CACtB,CAAC,MAAyB,EAAE,IAAkB,EAAqB,EAAE,CACpE,IAAI,OAAO,CAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAC3B,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;YAC1C,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,GAAG;YACV,SAAS,EAAE,EAAE;YACb,KAAK,EAAE,SAAS;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prosopo/better-auth-procaptcha-plugin",
-  "version": "0.0.0",
+  "version": "0.1.0",
   "description": "Prosopo Procaptcha bot protection for Better Auth. Verifies a Procaptcha token before sign-up, sign-in and other auth endpoints run.",
   "type": "module",
   "engines": {
@@ -28,7 +28,7 @@
     "bot-protection"
   ],
   "dependencies": {
-    "@prosopo/types": "5.30.0"
+    "@prosopo/types": "5.31.0"
   },
   "peerDependencies": {
     "better-auth": "^1.7.0"